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SYSTEM AND METHOD FOR AUTHENTICATION OF A USER 
OF A MULTI-FUNCTION PERIPHERAL 

TECHNICAL FIELD 

5 The present invention is generally related to the field of multi-function peripherals 

and, more particularly, is related to a system and method for authentication of a user of a 
multi-function peripheral. 

BACKGROUND OF THE INVENTION 

10 Document handling technology has begun the task of integrating the functions of a 

printer, a scanner, and a copy machine into a single multi-fiinction peripheral. In an office 
environment, such multi-function peripherals are often linked to a computer or a network to 
enable users to print documents from their computers on the same network. Also individuals 
may use the multi-fiinction peripheral as the office copy machine and as a scanner. 

15 In addition, multi-fiinction peripherals may also include a digital sender to transmit 

documents as electronic mail or as a facsimile. In an office environment, the digital sending 
fiinctionality of a multi-fiinction peripheral provides a public point of access for transmission 
of documents. That is to say, that multiple parties can employ the multi-fiinction peripheral 
to scan a document for transmission to a third party. This functionality differs fi-om the 

20 electronic mail fiinction, for example, of a typical computer in an office environment in that 
the computer is usually assigned to a particular individual, often times with limited access to 
the computer by requiring passwords, etc. Since a computer is dedicated to a single 
individual, a user who transmits a document via electronic mail, for example, usually does 
not have to specify fi-om whom the document has been sent as the electronic mail 

25 fiinctionality contained therein will automatically indicate the user as the sender of the 
document transmission. In this case, the computer knows from whom the document has 
been sent, that is, the user associated with the particular computer. 

In the case of a multi-fimction peripheral, the user from whom a data transmission is 
sent is not automatically known. Consequently, multi-fiinction peripherals provide users 

30 with the ability to enter their names or electronic mail address in conjunction with the 

transmission of a scanned document using the digital sending capability. Unfortunately, this 
can cause problems. In particular, a scheming user may illicitly send documents to another 

1 

HP Case No: 10004010-1 



under an assumed name to tamper with the normal operation of a particular organization. 
Also, users may gain unauthorized access to such equipment to send information. 

SUMMARY OF THE INVENTION 

In light of the foregoing, a system and method are provided in a multi-function 
peripheral to authenticate a user. In this regard, the system includes a processor and a 
memory that are coupled to a local network. The system also includes send logic stored on 
the memory and executable by the processor. The send logic includes logic to input a 
password associated with a user, and logic to authenticate the password and to obtain a 
FROM field identifier associated with the user. The system also features logic to lock the 
FROM field identifier into a FROM field associated with a data transmission. 

The present invention may also be viewed as a method for authenticating a user of a 
muhi-fimction peripheral Broadly stated, the method comprises the steps of inputting a 
password associated with a user into a device, authenticating the password and obtaining a 
FROM field identifier associated with the user, and, locking the FROM field identifier into a 
FROM field associated with a data transmission to be transmitted from the device. 

According to another aspect of the present invention, a system and method are 
provided for authenticating a user. The system comprises a processor and a memory that are 
coupled to a local network. Also, authentication logic is stored on the memory and is 
executable by the processor. The authentication logic includes logic to verify a password 
associated with a user, and logic to obtain a FROM field identifier associated with the user. 

The present invention may also be viewed as a method for authenticating a user. 
Broadly stated, the method comprises the steps of verifying a password associated with a 
user, and obtaining a FROM field identifier associated with the user. 

Other features and advantages of the present invention will become apparent to a 
person with ordinary skill in view of the following drawings and detailed description. It is 
intended that all such additional features and advantages be included herein within the scope 
of the present invention. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The invention can be understood with reference to the following drawings. The 
components in the drawings are not necessarily to scale. Also, in the drawings, like 
reference numerals designate corresponding parts throughout the several views. 

FIG. 1 is a block diagram of an office network according to the present invention; 

FIG. 2A is a flow chart of digital sender logic executed in a multi-function peripheral 
in the office network of FIG. 1; 

FIG. 2B is a flow chart of send authentication logic executed in conjunction with the 
digital sender logic of FIG. 2A; and 

FIG. 3 is a flow chart of authentication logic executed in a server in the office 
network of FIG. 1. 

DETAILED DESCRIPTION OF THE INVENTION 

With reference to FIG. 1, shown is an office network 100 according to the present 
invention. The oflBce network 100 includes a multi-function peripheral (MFP) 105, a server 
1 10, a domain controller 115, and a directory server 120. The MFP 105, server 1 10, domain 
controller 115, and the directory server 120 are all coupled to a network 125 and are in data 
communication v^th each other via the network 125. The network 125 may be, for example, 
a local area network, etc. The MFP 105 includes the functions of a copier, printer, and a 
scanner. 

The MFP 105 includes a processor circuit to implement and control copy, print, and 
scan fijnctions. The processor circuit includes a processor 130 and a memory 135, both of 
which are coupled to a local interface 140. The local interface 140 may be a data bus with an 
accompanying control bus as knovra by those with ordinary skill in the art. 

The MFP 105 also includes a network interface 145 that couples the local interface 
140 to the network 125. The network interface 145 may be, for example, an interface card 
or other interface that includes appropriate buffer or other circuitry that links the local 
interface 140 to the network 125 based upon the data communications protocol of the 
network 125. In addition to the network interface 145, the MFP 105 also includes 
input/output interfaces 150 that couple the local interface 140 with a number of input/output 
devices 155. The input/output devices 155 may include user input devices such as, for 

3 
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example, a keypad, touch pad, touch screen, microphone, mouse, joystick, or one or more 
push buttons, etc. User output devices may include display devices, speakers, printers, etc. 
The display devices may encompass, for example, a cathode ray tube (CRT), a liquid crystal 
display screen, a gas plasma-based flat panel display, indicator lights, light emitting diodes, 
5 and other display devices. Other user input/output devices 155 beyond those listed above 
may be employed as well. Note that there are also other input/output devices that are 
controlled by the processor 130 that perform the various functions of the MFP 105 including 
motors and other equipment, e/c, as is known by those of ordinary skill in the art. 

The server 110 also includes a processor circuit that includes a processor 160 and a 
10 memory 165, both of which are coupled to a local interface 170. Similar to the local 

interface 140, the local interface 170 may be a data bus with an accompanying control bus as 
Q known by those with ordinary skill in the art. The local interface 170 is coupled to the 

network 125 by a network interface 175. Also, the server 1 10 may include one or more 
O input/output devices 180 that are linked to the local interface 170 by one or more 

Ln 15 input/output interfaces 185. The input/output devices 180 may include, for example, devices 
^ similar to the input/output devices 155 discussed above. 

In addition, the processors 130/160 and memories 135/165 may represent multiple 
m processors and memories that operate in parallel. In such a case, the local interfaces 140/170 

\^ may each be an appropriate network that facilitates communication between any two of the 

y 20 multiple processors or between any one of the processors and any of the memories, etc. In 
addition, the processors 130/160, memories 135/165 and local interfaces 140/170 may be 
electrical or optical in nature. Also, the memories 135/165 may include both volatile and 
nonvolatile memory components. Volatile components are those that do not retain data 
values upon loss of power. Conversely, nonvolatile components retain data upon a loss of 
25 power. Thus, the memories 135/165 may comprise, for example, random access memory 

(RAM), read-only memory (ROM), hard disk drives, floppy disk drives, compact disk drives, 
tape drives, and/or other memory components, or a combination of any two or more of these 
memory components. 

The MFP 105 also includes MFP operating logic 190 that is stored on the memory 
30 135 and executable by the processor 130. The MFP operating logic 190 includes digital 
sender logic 195 that is executed to transmit a document from the MFP 105 to another 
device on the network 125 or to a device on an external network, for example, through a 
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standard mail transfer protocol server (SMTP) (not shown) coupled to the network 125. 
The digital sender logic 195 includes logic that is executed to authenticate a particular user 
who wishes to transmit a document using MFP 105 as will be discussed. 

The server 110 includes operating logic 198 and authentication logic 200. The 
5 operating logic 198 provides for the functionality of the server 1 10 in its general role on the 
network 125 as is known by those of ordinary skill in the art. The authentication logic 200 is 
executed by the processor 160 to authenticate a user in conjunction with an authentication 
request transmitted from the MFP 105. 

Next a discussion of the general operation of the office network 100 is provided. To 

10 begin, a user approaches the MFP 105 v^th the desire to scan one or more hardcopy 

documents into digital form to be transmitted to one or more recipients. Assuming that the 
authentication functionality of the MFP 105 is active, the user places documents to be 
scanned on the machine and manipulates the appropriate input devices 155 to initiate the 
digital sending capability of the MFP 105. The MFP 105 then requires the user to input their 

15 usemame and their password using an appropriate input device 155. Note that the usemame 
is defined herein as the name by which a user is identified on the network 125 as opposed to 
the actual name of the user that is the name by which they are generally addressed. 

The MFP 105 then determines if the usemame and password have been stored in the 
memory 135 are valid and may be reused. That is to say, every time a user is authenticated 

20 by the MFP 105, the MFP 105 stores the usemame and password just in case the user has 
more than one scan/send job to perform consecutively. For each subsequent scan/send job 
performed by the user, the usemame and password are entered into the MFP 105. The MFP 
105 will authenticate the user for these subsequent scan/send jobs by matching the stored 
usemame and password from the previous scan/send job with the currently entered 

25 credentials. Note, however, for this avenue of authentication to take place, the previous 
scan/send job has to be either pending or currently transmitting at the time the subsequent 
scan/send job is initiated. Note that a previous scan/send job is pending if the digital 
document that was scanned into the memory 135 is the last document in a send queue 
waiting to be transmitted behind other pending scan/send jobs. 

30 Assuming, however, that the usemame and password cannot be authenticated based 

upon a prior scan/send job, the MFP 105 then encrypts both the user password and the 
usemame, although the user password may be encrypted alone. The user password and the 
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usemame are encrypted to prevent the password from being misappropriated on the network 
125 by an unscrupulous individual who has access to the network 125. The MFP 105 then 
transmits an authentication request to the server 110 along with the encrypted user password 
and usemame. If the MFP 105 is currently transmitting a digital document to various 
5 recipients from a prior scan/send job when the authentication request is to be transmitted to 
the server 110, then a parallel channel is employed to transmit the authentication request 
concurrently with the transmission of the digital document. This prevents a user from having 
to wait for a prior scan/send job to finish transmitting before they can initiate a subsequent 
scan/send job. 

10 The server 110 responds to the authentication request by decrypting the user 

password and usemame. Next the server 110 communicates with the domain controller 115 
to verify the user password and usemame accordingly. If the user password and the 
usemame are valid, the domain controller 115 informs the server 110 and also transmits a 
secure identification tag (SID) that is associated with the user to the server 1 10. If the user 

15 password and the usemame are not valid, then the domain controller 115 informs the server 
1 10 as such and the server 1 10, in tum, informs the MFP 105 that the user could not be 
verified. The MFP 105 then prevents the user from scanning and transmitting the documents 
accordingly. 

Assuming that the user password and the usemame were verified and the secure 
20 identification tag is received from the domain controller 1 15, the server 1 10 then supplies the 
secure identification tag to the directory server 120 along with at request for an email 
address and/or a name that is associated with the user. The directory server 120 identifies 
this information based upon the secure identification tag. The directory server 120 then 
transmits the email address and/or the name of the user to the server 110. The server 1 10 
25 then sends a response to the MFP 105 that includes the email address and/or the name of the 
user. Note if an email address and/or name could not be identified by the directory server 
120 based upon the secure identification tag, the server 1 10 will transmit a response to the 
MFP 105 that indicates the user could not be verified and fijrther scanning and transmission 
of the document is disallowed. 
30 Assuming that the server 1 10 has responded to the MFP 105 verifying the user with a 

corresponding email address and/or name, the MFP 105 associates either the email address, 
the name of the user, or both with the pending transmission of document. In particular, each 
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transmission from the MFP 105 includes a "FROM" field in which the email address, name of 
the user, or other identifying information may be placed. In this regard, the email address, 
name of the user, or other identifying information is referred to as a "FROM" identifier that 
identifies the sender to the recipient. The association of a particular FROM identifier with a 
transmission involves placing the FROM identifier into the FROM field. For example, in the 
case that the scanned document is sent by email, the FROM identifier may be the email 
address that is included in the FROM field of the email. In the case that the scanned 
document is sent by facsimile, the FROM identifier may be the name of the user that is 
included in a FROM field that ultimately is included in a cover page of the facsimile. Note 
that if a user was authenticated based upon a prior scan/send job as discussed above, the 
prior email address and/or the name of the user stored in the memory 135 is placed into the 
FROM field, thereby bypassing the necessity of communicating with the server 1 10 to 
authenticate the usemame and password. 

In addition, the MFP 105 "locks" the FROM identifier into the FROM field so that 
the user is prevented from entering or otherwise altering the FROM identifier. This is to 
prevent an unscrupulous individual from entering a FROM identifier that is not their own to 
send an illicit transmission from the MFP 105 without personal accountability and with 
negative consequences to the individual who was associated with the transmission. The 
locking function ensures that only the FROM identifier associated with the user password 
entered previously appears in the FROM field by preventing a user from altering or entering 
a new FROM identifier. 

Once the FROM identifier is locked into the FROM field, the user then inputs the 
address(es) and/or telephone number(s) of the recipient(s). The MFP 105 commences the 
scan function and then places the document in the send queue for transmission to the 
respective recipients. The FROM identifier may also be employed to inform the user if a 
particular transmission was not successfully transmitted. For example, if the scanned 
document was to be sent by email, the FROM identifier (email address) can be used as the 
return address for the email that did not make it to its destination. In the case that the 
scanned document is to be sent by facsimile, the email address that was obtained with the 
name of the user can be used to send a digital confirmation as to whether the facsimile was 
successfully transmitted. 

7 
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With the foregoing in mind, reference is made to FIG. 2A in which a flow chart is 
depicted of the digital sender logic 195 according to an embodiment of the present invention. 
The digital sender logic 195 is executed to perform the scanning and digital sending functions 
as well as the authentication functions in the MFP 105 as discussed above. Beginning with 
5 block 203, the digital sender logic 195 ascertains whether a send operation is to be 

performed. A send operation begins upon an occurrence of an appropriate send input such 
as, for example, pressing a send button either in the form of a push button or a button on a 
touch screen as one of the I/O devices 155 (FIG. 1). If in block 203 an appropriate input has 
been received indicating that a send operation is to be performed, then the digital sender 

10 logic 195 progresses to block 206. In block 206 it is determined whether the authentication 
feature of the MFP 105 has been enabled. If the authentication feature has not been enabled, 
then the digital sender logic 195 moves to block 209 in which the sender and the recipient of 
a particular scan/send job is entered in by the user. The digital sender logic 195 then moves 
to connector A that ultimately bypasses the authentication process on the MFP 105. 

15 On the other hand, if in block 206 the authentication feature of the MFP 105 is 

enabled, then the digital sender logic 195 progresses to block 213. Thus, as shown in block 
206, the digital sender logic 195 provides the ability to disable the authentication features of 
the MFP 105 altogether. To do this, for example, a bit within the memory 135 (FIG. 1) may 
be set in an active or inactive state that corresponds to whether the authentication function is 

20 active or inactive. In block 206, this bit may be examined to determine its state and the 
digital sender logic 195 responds accordingly. 

In block 213, the digital sender logic 195 causes a display to appear in an appropriate 
output device 155 that provides an interface for a user to log into the MFP 105 to perform 
the scan/send job. Next, in block 216 the digital sender logic 195 receives the usemame and 

25 user password as inputs that are entered by the user by manipulating the interface. 
Thereafter, in block 219 it is determined whether the usemame and user password 
correspond with a previous usemame and password of a prior scan/send job that is currently 
pending or transmitting. If such is the case, then the digital sender logic 195 moves to 
connector B in which the FROM identifier(s) stored from the prior scan/send job are locked 

30 into the FROM field for the current scan/send job. If the prior scan/send job is neither 
pending nor transmitting, then the digital sender logic 195 moves to block 223. 
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In block 223, the digital sender logic 195 determines if the MFP 105 is currently 
transmitting a digital document to respective recipients. This may be the case if there were 
one or more digital documents in the send queue in the MFP 105 that are waiting to be 
transmitted. If there is currently a digital document transmitting, then the digital sender logic 
5 195 moves to block 225 in which a parallel channel is opened in which to transmit an 

authentication request to the server 110. This is done so that the current user does not have 
to wait for a prior scan/send job to finish transmitting before they can be authenticated for a 
subsequent scan/send job. If there is not digital document currently transmitting in block 223 
or after a parallel channel has been opened in block 226, the digital sender logic 195 moves 
10 to block 229. 

Then, in block 229, the user password is encrypted for transmission across the 
network 125 (FIG.l) to server 110 (FIG. 1). This is done to insure that unscrupulous users 
who have access to the network 125 are not able to intercept a user password of a particular 
user of the MFP 105. In addition, the usemame may also be encrypted as well. 

15 After the usemame arid user password are encrypted in block 229, the digital sender 

logic 195 progresses to block 233 in which a request for validation of the user password and 
usemame is transmitted to the server 110 accompanied by the encrypted password and the 
usemame. The digital sender logic 195 then progresses to connector C. 

With reference to FIG. 2B, shown is a continuation of the digital sender logic 195. 

20 From connector C, the digital sender logic 195 moves on to block 236 in which the digital 
sender logic 195 waits to receive a response fi*om a server 110 (FIG. 1). Assuming a 
response has been received, then the digital sender logic 195 moves to block 239 to 
determine whether the response indicates that the user credentials transmitted have been 
authenticated or are valid. If it is determined that they are not valid, then the digital sender 

25 logic 195 ends accordingly. However, if it is determined that the credentials are valid, then 
the digital sender logic 195 moves to block 243 in which an email address or usemame are 
locked into a "FROM" field that is associated with the pending date of transmission. Note 
that a "valid" response received fi-om the server 1 10 is accompanied by the email address 
and/or the name of the user, i.e. the FROM identifiers, as discussed previously, such 

30 information having been obtained fi-om the directory server 120 (FIG. 1). In addition, 
connector B also leads to block 243 from block 219 (FIG. 2 A) as discussed above. 
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Once the FROM identifier(s) is/are locked into the FROM field in block 243, the 
digital sender logic 195 progresses to block 246 in which the usemame, user password, and 
the associated FROM identifier(s) are stored in the memory 135 for potential fiiture use as 
determined in block 219 (FIG. 2 A). Thereafter, the digital sender logic 195 moves to block 
5 249 in which the recipient address, telephone number, etc. is entered into a "TO" field. The 
TO field is associated with the current scan/send job and indicates the proper recipient(s) of 
the document. Thereafter, the digital sender logic 195 proceeds to block 253 in which the 
document is scanned by the MFP 105 into the memory 135. Next, in block 256 the current 
scan/send job is placed in the send queue for transmission to the appropriate recipients. If no 

10 prior scan/send job is currently transmitting, then the current scan/send job is immediately 
transmitted to the recipients. 

Referring next to FIG. 3, shown is a flow chart of the authentication logic 200 that is 
executed by the server 110 (FIG. 1) to validate a particular user as requested by MFP 105 
(FIG. 1) according to an embodiment of the present invention. The authentication logic 200 

15 is executed by the processor 160 (FIG. 1) in communicating v^th the domain controller 115 
(FIG. 1), the directory server 120 (FIG. 1) and the MFP 105 to perform the validation task. 
Beginning wdth block 303, the authentication logic 200 determines whether an authentication 
request has been received fi-om the MFP 105 along with an associated user password and 
usemame. If such is the case, then the authentication logic 200 progresses to block 306 in 

20 which the user password is decrypted and the usemame is also decrypted if necessary. Then, 
in block 309 the user password and usemame are verified with the domain controller 115. 
The domain controller 115 verifies that the user password and the usemame are valid on the 
network 125 (FIG.l) and also identifies a secure identification tag that is associated with the 
user based upon the usemame and/or the user password. The secure identification tag is a 

25 globally unique identifier that is associated with the user. 

If the user password and the usemame are valid as determined by the domain 
controller 115, then the domain controller 115 will transmit the secure identification tag to 
the server 110 along with an indication that the usemame and user password are valid. In 
block 313, the authentication logic 200 determines whether the domain controller 115 has 

30 provided a valid secure identification tag. If not, then the authentication logic 200 

progresses to block 316. On the other hand if a response is received from the domain 

10 
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controller 115 with a valid secure identification tag with the indication that the user is a valid 
user, then the authentication logic progresses to block 319. 

In block 3 19 an appropriate email address and/or name that corresponds to the 
secure identification tag is requested firom the directory server 120 using the lightweight 
5 directory access protocol (LDAP) that operates on the directory server 120 (FIG. 1). The 
lightweight directory access protocol is generally known by those with ordinary skill in the 
art and is not discussed herein in detail. Thereafter, in block 323 the authentication logic 200 
determines whether a valid response with an email address or name has been received fi'om 
the directory server 120. If such is the case then the authentication logic 200 progresses to 

10 block 326. If not, then the authentication logic 200 moves to block 316. 

In block 326 a response is transmitted to the MFP with the appropriate email address 
and/or name of the user. This indicates to the MFP 105 that the authentication of the user 
was successfiil and that fiirther scanning and transmission tasks can be completed. Also, the 
email address and/or the name of the user supplied to the MFP 105 can be used in the 

15 "FROM" field associated with the particular transmission of the scanned document. On the 
other hand, in block 316 the authentication logic 200 transmits an authentication failure 
indication to the MFP 105 indicating that the user has not been authenticated. This prevents 
the user fi-om scanning and/or transmitting the document as the user is not validated on the 
network 125. After block 326 and/or 316, the authentication logic 200 ends accordingly. 

20 Although the logic 195 (FIGS. 2A-B) and 200 (FIG. 3) of the present invention is 

embodied in software as discussed above, as an alternative the logic 195 and 200 may also be 
embodied in hardware or a combination of software and hardware. If embodied in hardware, 
- - the logic 195 and"200 can be implemented as a circuit or state machine that employs any one 
: of or a combination of a number of technologies. These technologies may include, but are 

25 not limited to, discrete logic circuits having logic gates for implementing various logic 
fijnctions upon an application of one or more data signals, application specific integrated 
circuits having appropriate logic gates, programmable gate arrays (PGA), field 
programmable gate arrays (FPGA), or other components, etc. Such technologies are 
generally well known by those skilled in the art and, consequently, are not described in detail 



The block diagram of FIG. 1 and flow charts of FIGS. 2A, 2B, and 3 show the 
architecture, fiinctionality, and operation of an implementation of the logic 195 and 200. If 



30 



herein. 
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embodied in software, each block may represent a module, segment, or portion of code that 
comprises one or more executable instructions to implement the specified logical £ianction(s). 
If embodied in hardware, each block may represent a circuit or a number of interconnected 
circuits to implement the specified logical fiinction(s). Although the block diagram of FIG. 1 
5 and the flow charts of FIGS. 2A, 2B, and 3 show a specific order of execution, it is 

understood that the order of execution may differ fi-om that which is depicted. For example, 
the order of execution of two or more blocks may be scrambled relative to the order shown. 
Also, two or more blocks shown in succession in FIGS. 2 A, 2B, and 3 may be executed 
concurrently or with partial concurrence. It is understood that all such variations are within 

10 the scope of the present invention. 

Also, the logic 195 and 200 can be embodied in any computer-readable medium for 
use by or in connection with an instruction execution system such as a computer/processor 
based system or other system that can fetch or obtain the logic fi-om the computer-readable 
medium and execute the instructions contained therein. In the context of this document, a 

15 "computer-readable medium" can be any medium that can contain, store, or maintain the 
logic 195 and 200 for use by or in connection with the instruction execution system. The 
computer readable medium can comprise any one of many physical media such as, for 
example, electronic, magnetic, optical, electromagnetic, infi-ared, or semiconductor media. 
More specific examples of a suitable computer-readable medium would include, but are not 

20 limited to, a portable magnetic computer diskette such as floppy diskettes or hard drives, a 
random access memory (RAM), a read-only memory (ROM), an erasable programmable 
read-only memory, or a portable compact disc read-only memory (CDROM). 

Many variations and modifications may be made to the above-described 
embodiment(s) of the invention without departing substantially fi*om the spirit and principles 

25 of the invention. All such modifications and variations are intended to be included herein 
within the scope of the present invention. 
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